Our Commitment to Data Protection
Ceramika Unikatowa is committed to protecting your personal data and respecting your privacy. As a business operating within the European Union, we comply fully with the General Data Protection Regulation (EU) 2016/679 (GDPR).
Data Controller
Ceramika Unikatowa acts as the data controller for personal information collected through this website. Our contact details are:
Address: ul. Ceramiczna 47, 31-150 Krakow, Poland
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you submit inquiry forms, you consent to us processing your data to respond to your request
- Contract: When you commission work from us, we process your data to fulfill our contractual obligations
- Legitimate Interest: We may process data to improve our services and website functionality
- Legal Obligation: We retain certain records as required by Polish tax and commercial law
Your Rights Under GDPR
Right to Access (Article 15)
You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of your request.
Right to Rectification (Article 16)
If any personal data we hold is inaccurate or incomplete, you have the right to request correction.
Right to Erasure (Article 17)
Also known as the "right to be forgotten," you can request deletion of your personal data when:
- The data is no longer necessary for its original purpose
- You withdraw consent (where consent was the legal basis)
- You object to processing and there are no overriding legitimate grounds
- The data was unlawfully processed
Right to Restriction of Processing (Article 18)
You can request that we limit how we use your data while we verify accuracy or assess objection requests.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object (Article 21)
You can object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making (Article 22)
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.
Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit
- Regular security assessments
- Access controls limiting who can view personal data
- Staff training on data protection
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. If the breach is likely to result in a high risk to you, we will notify you directly.
Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Polish supervisory authority:
Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2
00-193 Warsaw, Poland
Updates to This Information
We may update this GDPR information page periodically. The date of the last revision will be indicated at the top of the page.